Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a3a2f33342d3334203d3e20323733353638.roa
File:                     323830343a383865383a3a2f33342d3334203d3e20323733353638.roa (raw, json)
Hash identifier:          QM0wk/unqmGu2VDItTb4Z/ObQuevtw8DYqv66KpKnBY=
Subject key identifier:   E9:FA:18:74:54:AD:5D:03:C9:0D:74:A6:9D:8C:39:AA:2F:A6:C6:ED
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       36A7AA5D493079807F502C779EB5C397677A83E0
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a3a2f33342d3334203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:58 +0000
ROA not before:           Tue 31 Oct 2023 18:33:58 +0000
ROA not after:            Tue 29 Oct 2024 18:38:58 +0000
asID:                     273568
IP address blocks:        2804:88e8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a7:aa:5d:49:30:79:80:7f:50:2c:77:9e:b5:c3:97:67:7a:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:58 2023 GMT
            Not After : Oct 29 18:38:58 2024 GMT
        Subject: CN=E9FA187454AD5D03C90D74A69D8C39AA2FA6C6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:f4:e1:3c:a0:8e:d2:f7:42:84:a4:35:b7:
                    ca:60:f0:78:02:72:5e:b5:b9:2a:bc:13:08:0d:00:
                    cf:fa:fc:46:fd:73:49:cd:85:22:83:15:b1:69:9d:
                    32:7e:b6:16:25:37:60:de:e4:92:f3:5c:ae:10:5b:
                    0c:85:1d:b6:9b:d0:5c:fc:ae:f9:b8:52:f2:f8:e2:
                    ea:67:be:20:6d:9f:6d:93:aa:14:20:70:d3:d5:e8:
                    4d:8d:c6:da:d3:4e:d9:0a:da:fa:e1:e3:e8:8f:05:
                    af:48:8f:ce:a4:e4:e2:df:af:70:65:06:cf:16:b4:
                    1d:55:53:27:10:d2:ec:34:c3:0d:52:a4:a6:b4:8d:
                    c2:b8:64:02:b3:f9:ed:bb:9f:7a:52:41:f4:39:8f:
                    39:76:dd:b1:bf:d4:a3:66:e0:0e:c1:2e:55:f3:2f:
                    4d:be:42:69:66:b5:76:80:36:52:62:77:02:a0:df:
                    91:65:f4:1b:82:1b:5e:bf:0b:82:b3:4d:76:52:b1:
                    15:ea:46:d0:f9:a9:0d:ce:c0:09:26:29:17:7a:a4:
                    22:0a:9d:d5:cc:c6:84:3b:ae:5e:45:0e:54:6d:32:
                    7e:e5:7c:38:a8:64:13:82:46:02:af:82:92:54:51:
                    08:b5:8f:10:b0:c8:9f:e3:52:03:60:e4:66:26:aa:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:18:74:54:AD:5D:03:C9:0D:74:A6:9D:8C:39:AA:2F:A6:C6:ED
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a3a2f33342d3334203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:6c:de:c5:8d:c3:6a:e6:60:41:2b:61:a5:8d:cc:48:1f:ee:
         e7:9b:be:a2:a3:c9:ae:5f:0e:b4:eb:59:c5:3b:4f:3f:1f:b9:
         24:ed:34:38:9d:16:16:fd:5e:97:bb:07:49:f3:f1:b0:8d:a3:
         68:1f:a3:15:48:92:ea:37:ea:0e:1c:5d:39:83:24:bb:28:5a:
         9a:ab:9b:c5:15:a9:a2:ed:1b:44:b8:99:b3:c6:33:d2:bf:40:
         f1:bc:f4:89:d3:be:ad:f3:29:88:8b:de:dc:8a:d0:aa:5a:af:
         51:13:13:4d:e1:50:69:15:80:c0:ae:98:96:c3:25:4d:4d:20:
         5c:9b:0b:98:3c:0d:53:cd:21:e4:9a:f2:87:c4:3b:b3:ba:84:
         00:07:9d:4f:6b:fd:b9:d9:dd:fb:db:f7:f8:34:7e:22:89:55:
         1c:0a:3c:e8:a4:55:ef:d2:fe:d4:29:a7:cf:a5:20:68:c4:ef:
         55:3f:6f:fd:b5:99:0b:00:4b:db:7b:20:df:ba:09:08:7d:96:
         ca:a1:ce:d4:89:54:d8:be:df:e5:5f:96:25:2a:11:55:4b:f1:
         19:b4:6a:ce:71:dc:71:86:92:cd:e2:69:e6:37:c4:0d:ed:d6:
         56:9e:da:d9:0b:53:f1:42:6a:8e:68:fb:f0:e8:d7:30:9b:b7:
         74:77:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:23 2025 by rpki-client